112
Kaspersky Anti-Virus for Novell NetWare
B.2.3.2. Messages Regarding Suspicious Files
In the event that a suspicious file is detected, the following record will be created
in the event log file:
<DATE> <TIME> SYS:\TEST\MY_FILE.EXE : suspicion
TYPE_<TYPE>,
where <TYPE> is one of the following strings:
Com
– the file appears to be infected with an unidentified virus capable of
damaging com-files.
Exe
– the file appears to be infected with an unidentified virus capable of
damaging exe-files.
ComExe
– the file appears to be infected with an unidentified virus capable
of damaging COM and EXE file formats.
ComTSR
,
ExeTSR
,
SysTSR
,
ComExeTSR
– the file appears to be infected
with an unidentified resident virus capable of damaging COM, EXE and
SYS file formats.
Boot
– the file/sector appears to be infected with an unidentified boot-virus
or something like a boot-virus installer.
Trojan
– the file appears to be a Trojan horse.
Trivial
– the file appears to be infected with an unidentified virus capable of
replacing executable files in the current directory (the size of this virus is
usually less than 300 bytes).
HLL
– the file appears to be infected with an unidentified virus capable of
damaging executable files and written in a high-level language (C, Pas-
cal etc.)
Win32
– the file appears to be infected with an unidentified Windows-virus.
Formula –
the Excel file contains suspicious commands.
Macro.Word97.Fs
– a Macro.Word97.Fs family virus suspected.
RemoteTemplate
– the document contains a link to a template automati-
cally loaded when the file is opened.
HTML.SecurityBreach.2
– HTML file or an HTML format e-mail message
contains a link to a suspicious object.
IRC-Worm.generic
– the file appears to be infected with an unidentified
worm spreading via IRC channels.
BAT
– the file appears to be a file infected with an unidentified virus capable
of damaging BAT format files.
VBS.I-Worm
– the file appears to be infected with an unidentified worm
spreading via e-mail.
